diff --git a/src/content/docs/security/analytics.mdx b/src/content/docs/security/analytics.mdx index 95376e89f1bbf2..5a5ad2417653b6 100644 --- a/src/content/docs/security/analytics.mdx +++ b/src/content/docs/security/analytics.mdx @@ -1,28 +1,30 @@ --- -title: Security analytics (new dashboard) +title: Security Analytics (new dashboard) pcx_content_type: concept sidebar: order: 3 - label: Security analytics -description: Security analytics shows information about all incoming HTTP requests or mitigated requests (rule matches). + label: Security Analytics +description: Security Analytics shows information about all incoming HTTP requests or mitigated requests (rule matches). --- -import { Stream, GlossaryTooltip } from "~/components"; +import { Stream, GlossaryTooltip, DashButton } from "~/components"; -Security analytics shows information about all incoming HTTP requests or only about requests mitigated by Cloudflare. +Security Analytics shows information about all incoming HTTP requests or only about requests mitigated by Cloudflare. -Use Security analytics as your starting point to understand and analyze traffic patterns, and to create security rules based on the filters you applied. +Use Security Analytics as your starting point to understand and analyze traffic patterns, and to create security rules based on the filters you applied. -By default, Security Analytics queries filter on `requestSource = 'eyeball'`, which represents requests from end users. Note that requests from Cloudflare Workers (subrequests) are not visible in Security Analytics. +To access Security Analytics in the new security dashboard, go to the **Analytics** page. -Security analytics is available in **Security** > **Analytics**. + +By default, Security Analytics queries filter on `requestSource = 'eyeball'`, which represents requests from end users. Note that requests from Cloudflare Workers (subrequests) are not visible in Security Analytics. + ## Traffic The **Traffic** tab displays information about all incoming HTTP requests for your domain, including requests not handled by Cloudflare security products. diff --git a/src/content/docs/security/index.mdx b/src/content/docs/security/index.mdx index 9c7348e1adce8c..4fe3a0beafed3b 100644 --- a/src/content/docs/security/index.mdx +++ b/src/content/docs/security/index.mdx @@ -16,9 +16,9 @@ import { LinkTitleCard, RelatedProduct, Stream, + DashButton, } from "~/components"; - The application security dashboard is your starting point to better understand the security posture of your web applications, and to configure rules to protect them. @@ -31,9 +31,11 @@ Cloudflare is gradually making the new **Security** dashboard available by defau To opt out of the new security dashboard: -1. Log in to the [Cloudflare dashboard](https://dash.cloudflare.com), and select your account and domain. -2. Go to **Security** > **Settings**. -3. Search for the setting **New application security dashboard** and turn it off. +1. In the Cloudflare dashboard, go to the Security **Settings** page. + + + +2. Turn off the setting **New application security dashboard**. The opt-out option will be available for a limited time. diff --git a/src/content/docs/security/overview.mdx b/src/content/docs/security/overview.mdx index 72e3a52671e1c0..b854179c0faaae 100644 --- a/src/content/docs/security/overview.mdx +++ b/src/content/docs/security/overview.mdx @@ -5,10 +5,17 @@ sidebar: order: 2 --- +import { DashButton } from "~/components"; + Security overview provides a high-level overview of your domain. It allows you to identify security action items and review the security posture of your domain. +To acess Security overview in the new security dashboard, go to the **Overview** page. + + + The Security overview page displays the following information: -- If you are on a Free plan, the dashboard will display **Traffic last 24 hours**, which allows you to review traffic from the 24 hours that has been mitigated by Cloudflare. If you are on a Business, Pro, or Enterprise plan, the dashboard will display **Traffic last 7 days**, which allows you to review traffic from the last seven days that has been mitigated by Cloudflare. -- **Security category**: The dashboard will display security suggestions categorized by the different types of threats that Cloudflare detects and mitigates. -- **All suggestions**: The dashboard displays the full list of available suggestions to improve your security posture. +- **Traffic last 24 hours** (Free plan only): Allows you to review traffic from the last 24 hours that has been mitigated by Cloudflare. +- **Traffic last 7 days** (paid plans): Allows you to review traffic from the last seven days that has been mitigated by Cloudflare. +- **Security category**: Displays security suggestions categorized by the different types of threats that Cloudflare detects and mitigates. +- **All suggestions**: Displays the full list of available suggestions to improve your security posture. diff --git a/src/content/docs/security/rules.mdx b/src/content/docs/security/rules.mdx index 0b67a8b12fe18f..aebb56ede130c1 100644 --- a/src/content/docs/security/rules.mdx +++ b/src/content/docs/security/rules.mdx @@ -6,9 +6,13 @@ sidebar: description: Security rules perform security actions on incoming requests that match specified filters. --- +import { DashButton } from "~/components"; + Security rules perform security-related actions on incoming requests that match specified filters. Rules are evaluated and executed in order, from first to last. -Security rules are available in the new security dashboard in **Security** > **Security rules**. +To access security rules in the new security dashboard, go to the **Security rules** page. + + ## Security rules @@ -16,10 +20,13 @@ The **Security rules** tab includes a list of different types of rules configure To create a security rule: -1. Log in to the [Cloudflare dashboard](https://dash.cloudflare.com/) and select your account and domain. -2. Go to **Security** > **Security rules**. -3. (Optional) Select **Templates**, and then select a template from the list. You can customize the default configuration of the template before deploying the new rule. Refer to the resources listed in the next step. -4. Select **Create rule** > select the type of rule you want to create. Refer to the following resources about each rule type: +1. In the Cloudflare dashboard, go to the **Security rules** page. + + + +2. (Optional) Select **Templates**, and then select a template from the list. You can customize the default configuration of the template before deploying the new rule. Refer to the resources listed in the next step. + +3. Select **Create rule** > select the type of rule you want to create. Refer to the following resources about each rule type: - [Custom rules](/waf/custom-rules/create-dashboard/#rule-form) - [Rate limiting rules](/waf/rate-limiting-rules/create-zone-dashboard/#rule-form) - [API sequence rules](/api-shield/security/sequence-mitigation/#rule-form) @@ -29,7 +36,7 @@ To create a security rule: :::note[Notes] -To deploy a managed ruleset, go to **Security** > **Settings** and filter by **Web application exploits**. For more information, refer to [Deploy a managed ruleset](/waf/managed-rules/deploy-zone-dashboard/#deploy-a-managed-ruleset). +To deploy a managed ruleset, go to the Security **Settings** page. For more information, refer to [Deploy a managed ruleset](/waf/managed-rules/deploy-zone-dashboard/#deploy-a-managed-ruleset). The **Security rules** tab includes functionality available in different products in the previous dashboard navigation structure, such as the [WAF](/waf/), [API Shield](/api-shield/), and [Page Shield](/page-shield/). diff --git a/src/content/docs/security/settings.mdx b/src/content/docs/security/settings.mdx index db7bd6cc29e0b2..324d68d383137c 100644 --- a/src/content/docs/security/settings.mdx +++ b/src/content/docs/security/settings.mdx @@ -7,7 +7,13 @@ sidebar: description: Configure different Cloudflare security features that protect your web applications, APIs, and resources. --- -This page describes the settings available in **Security** > **Settings** for a given domain. +import { DashButton } from "~/components"; + +This page describes the security settings available in the new security dashboard for a given domain. + +To access security settings in the new security dashboard, go to the **Settings** page. + + ## Security setting categories diff --git a/src/content/docs/security/web-assets.mdx b/src/content/docs/security/web-assets.mdx index de809fe4d9ca21..0a5ba28a01140c 100644 --- a/src/content/docs/security/web-assets.mdx +++ b/src/content/docs/security/web-assets.mdx @@ -6,8 +6,14 @@ sidebar: description: Discover web assets such as your API endpoints and instruct Cloudflare how to best protect them. --- +import { DashButton } from "~/components"; + Discover web assets such as your API endpoints and instruct Cloudflare how to best protect them. +To access web assets in the new security dashboard, go to the **Web assets** page. + + + ## Endpoints Use the **Endpoints** tab to manage endpoints available on your domain and monitor their health. @@ -43,7 +49,13 @@ Use **Sequences** to discover how users interact with your API, by tracking the Once you configure [session identifiers](/api-shield/management-and-monitoring/session-identifiers/), the **Sequences** tab will start grouping and highlighting important user journeys (sequences) across your API. -To configure session identifiers, go to **Security** > **Settings** and select **Configure session identifiers** next to **Session identifiers**. +To configure session identifiers: + +1. In the Cloudflare dashboard, go to the Security **Settings** page. + + + +2. Next to **Session identifiers**, select **Configure session identifiers** . For more information on how Cloudflare identifies API sequences and how you can configure API sequence rules, refer to the following resources: